$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/71e88fdc-fe9d-3d86-a562-343fd3ea6974.roa File: 71e88fdc-fe9d-3d86-a562-343fd3ea6974.roa (raw, json) Hash identifier: 2a3wgXPDGk5YIaDhJkx9sqLKswVufQoWms9zkKQJ4do= Subject key identifier: 36:BA:A4:DF:70:99:DA:DB:E1:EF:9B:A9:9B:A7:C9:73:F7:F9:41:21 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D210F80EEDBFC876FBBC3FC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/71e88fdc-fe9d-3d86-a562-343fd3ea6974.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 207.188.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:f8:0e:ed:bf:c8:76:fb:bc:3f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=30c54f08-b97b-4439-ab80-6399900a9d71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:fb:cd:57:d9:1d:af:47:ba:ba:aa:56:80:54: e7:7c:f4:f4:6a:a4:f9:93:05:56:9b:f9:07:b0:16: 85:ee:54:c5:90:32:04:70:0d:0e:c4:a5:48:c6:0b: e9:f9:2f:ec:54:c7:02:ef:d8:2c:2d:6d:ee:0d:ee: f1:aa:9f:39:f8:a7:80:62:0e:8a:ad:e9:3c:9e:86: ac:d4:49:07:38:6a:63:81:2a:e7:e2:08:48:b9:00: a3:29:b5:3e:cf:81:8e:64:5b:e9:d9:32:c8:07:4c: b6:01:d7:c4:c5:32:17:52:88:bb:98:56:6c:32:02: 21:1e:e7:71:19:95:7f:4b:dd:f3:6b:83:82:de:8c: 97:ca:63:6d:1a:aa:48:de:f9:67:9a:4c:62:71:da: 42:1c:e0:51:e5:3b:9f:bf:7e:09:6c:4e:5b:9c:75: 40:88:72:df:af:eb:1c:e4:c8:b0:c0:12:83:67:28: 01:bc:c8:2d:dc:11:c1:83:00:38:34:1f:e2:9e:e8: d8:64:f9:e9:f1:ba:6b:7e:25:37:97:38:75:1f:71: d6:f2:e9:fe:93:da:00:83:5a:c2:2d:86:c1:ea:98: 47:58:c8:59:c0:a4:fb:e5:47:b5:4e:2c:b3:d2:4a: 53:7f:6a:05:74:21:ad:10:b5:79:20:9d:54:f2:be: 78:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:BA:A4:DF:70:99:DA:DB:E1:EF:9B:A9:9B:A7:C9:73:F7:F9:41:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/71e88fdc-fe9d-3d86-a562-343fd3ea6974.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 207.188.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:b6:c3:e9:91:97:22:be:a6:fa:0b:3b:a4:94:49:2e:fc:37: e0:49:59:83:01:b7:7b:79:fb:6a:6b:f8:d5:20:0c:ad:3d:2b: 89:aa:d2:fd:ee:33:ae:97:89:72:17:07:dd:07:ea:e4:06:75: 45:3b:bf:63:c8:eb:d0:d7:7d:9d:48:6c:f7:aa:bc:8d:3f:63: c9:bc:23:af:e4:04:fe:1e:3e:07:76:9a:32:a4:92:0b:8d:9d: d1:0e:9a:53:a9:79:e7:c9:c1:8f:20:8f:55:77:40:93:17:08: 3b:ed:51:e2:a5:cd:0e:ea:a9:e6:e2:8c:31:79:5a:f4:d2:db: 19:6f:da:a2:22:1e:9b:2b:18:88:db:31:27:3a:c4:b7:01:d7: 37:e6:62:7c:bb:14:16:09:cf:49:75:ac:0d:0d:da:f4:ad:32: dd:2c:0a:a5:89:f6:2a:25:1c:de:f8:8d:6b:bc:5d:27:fa:37: 17:e8:fa:f0:0d:4d:21:8d:85:f6:6d:bb:3f:54:82:fa:dc:b3: 20:ab:d0:5c:a7:60:c2:3b:14:78:c2:9d:07:34:ce:61:d3:1c: 1c:ba:12:e9:d8:60:3e:c5:2d:02:67:6d:e7:9a:2c:c8:d1:63: b3:b4:da:1b:ab:8a:77:91:37:c2:73:14:bb:34:e4:7d:6c:3a: f7:c8:b9:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEPgO7b/Idvu8P8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk MzBjNTRmMDgtYjk3Yi00NDM5LWFiODAtNjM5OTkwMGE5ZDcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+/vNV9kdr0e6uqpWgFTnfPT0aqT5kwVWm/kH sBaF7lTFkDIEcA0OxKVIxgvp+S/sVMcC79gsLW3uDe7xqp85+KeAYg6Krek8noas 1EkHOGpjgSrn4ghIuQCjKbU+z4GOZFvp2TLIB0y2AdfExTIXUoi7mFZsMgIhHudx GZV/S93za4OC3oyXymNtGqpI3vlnmkxicdpCHOBR5Tufv34JbE5bnHVAiHLfr+sc 5MiwwBKDZygBvMgt3BHBgwA4NB/inujYZPnp8bprfiU3lzh1H3HW8un+k9oAg1rC LYbB6phHWMhZwKT75Ue1Tiyz0kpTf2oFdCGtELV5IJ1U8r54iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDa6pN9wmdrb4e+bqZunyXP3+UEhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzFlODhmZGMtZmU5ZC0z ZDg2LWE1NjItMzQzZmQzZWE2OTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFz7xgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFy2w+mRlyK+pvoLO6SUSS78N+BJWYMBt3t5+2pr+NUgDK09K4mq0v3u M66XiXIXB90H6uQGdUU7v2PI69DXfZ1IbPeqvI0/Y8m8I6/kBP4ePgd2mjKkkguN ndEOmlOpeefJwY8gj1V3QJMXCDvtUeKlzQ7qqebijDF5WvTS2xlv2qIiHpsrGIjb MSc6xLcB1zfmYny7FBYJz0l1rA0N2vStMt0sCqWJ9iolHN74jWu8XSf6Nxfo+vAN TSGNhfZtuz9UgvrcsyCr0FynYMI7FHjCnQc0zmHTHBy6EunYYD7FLQJnbeeaLMjR Y7O02hurineRN8JzFLs05H1sOvfIudY= -----END CERTIFICATE-----Generated at Sun Feb 16 15:08:48 2025 by rpki-client